×
United States

US Officials Fear Ransomware Attack Against 2020 Election (reuters.com) 147

The U.S. government plans to launch a program in roughly one month that narrowly focuses on protecting voter registration databases and systems ahead of the 2020 presidential election. From a report: These systems, which are widely used to validate the eligibility of voters before they cast ballots, were compromised in 2016 by Russian hackers seeking to collect information. Intelligence officials are concerned that foreign hackers in 2020 not only will target the databases but attempt to manipulate, disrupt or destroy the data, according to current and former U.S. officials. "We assess these systems as high risk," said a senior U.S. official, because they are one of the few pieces of election technology regularly connected to the Internet.

The Cybersecurity Infrastructure Security Agency, or CISA, a division of the Homeland Security Department, fears the databases could be targeted by ransomware, a type of virus that has crippled city computer networks across the United States, including recently in Texas, Baltimore and Atlanta. "Recent history has shown that state and county governments and those who support them are targets for ransomware attacks," said Christopher Krebs, CISA's director. "That is why we are working alongside election officials and their private sector partners to help protect their databases and respond to possible ransomware attacks."

Google

Google Doesn't Want Staff Debating Politics at Work Anymore (bloomberg.com) 301

Google posted new internal rules that discourage employees from debating politics, a shift away from the internet giant's famously open culture. From a report: The new "community guidelines" tell employees not to have "disruptive" conversations and warn workers that they'll be held responsible for whatever they say at the office. The company is also building a tool to let employees flag problematic posts and creating a team of moderators to monitor conversations, a Google spokeswoman said. "While sharing information and ideas with colleagues helps build community, disrupting the workday to have a raging debate over politics or the latest news story does not," the new policy states. "Our primary responsibility is to do the work we've each been hired to do." Google has long encouraged employees to question each other and push back against managers when they think they're making the wrong decision. Google's founders point to the open culture as instrumental to the success they've had revolutionizing the tech landscape over the last two decades.
Businesses

Bernie Sanders Wants To Ban Facial Recognition Use By Police (venturebeat.com) 154

Democratic presidential candidate Senator Bernie Sanders (I-VT) wants to put an end to police use of facial recognition software. Sanders called for the ban as part of a criminal justice reform plan introduced over the weekend ahead of a two-day tour of South Carolina. From a report: The plan also calls for the ban of for-profit prisons and would revoke the practice of law enforcement agencies benefiting from civil asset forfeitures. Sanders kicked off his campaign by saying "I'm running for president because we need to understand that artificial intelligence and robotics must benefit the needs of workers, not just corporate America and those who own that technology."
Youtube

YouTube's Algorithms Blamed For Brazil's Dangerous Conspiracy Video-Sharing on WhatsApp (nytimes.com) 69

Sunday the New York Times reported that YouTube "radicalized" Brazil -- by "systematically" diverting users to conspiracy videos. Yet conventional wisdom in Brazil still puts the blame on WhatsApp, the Times reported in a follow-up story on Thursday shared by Slashdot reader AmiMoJo.

"Everything began to click into place when we met Luciana Brito, a soft-spoken clinical psychologist who works with families affected by the Zika virus." Her work had put her on the front lines of the struggle against conspiracy theories, threats and hatred swirling on both platforms. And it allowed her to see what we -- like so many observers -- had missed: that WhatsApp and YouTube had come to form a powerful, and at times dangerous, feedback loop of extremism and misinformation. Either platform had plenty of weaknesses on its own. But, together, they had formed a pipeline of misinformation, spreading conspiracy theories, campaign material and political propaganda throughout Brazil.

The first breakthrough came when we spoke to Yasodara Cordova, who at the time was a researcher at Harvard's Berkman Center for Internet and Society. Illiteracy remains widespread in some parts of Brazil, she said, ruling out text-based social media or news sources for many people. And TV networks can be low-quality, which has helped drive YouTube's stunning growth in many parts of Brazil, particularly on mobile. But YouTube has had less success in poorer regions of Brazil for one simple reason: Users cannot afford the cellphone data. "The internet in Brazil is really expensive," Ms. Cordova said. "I think it's the fourth or fifth country in terms of internet prices."

WhatsApp has become a workaround. The messaging app has a deal with some carriers to offer free data on the app, and poorer users found that this offered them a way around YouTube's unaffordability. They would share snippets of YouTube videos that they found on WhatsApp, where the videos can be watched and shared for free. Ms. Cordova suspected that the WhatsApp-spread misinformation had often come from videos that first went viral on YouTube, where they had been boosted by the extremism-favoring algorithms that we documented in our story earlier this week... It was like an infection jumping from one host to the next.

Some of the videos blame the mosquito-bourne Zika virus on vaccines or suggest an international conspiracy, while some were "staged to resemble news reports or advice from health workers," the Times reports -- adding that as of Thursday the videos were still being recommended by YouTube's algorithm. (A spokesperson for YouTube "called the results unintended, and said the company would change how its search tool surfaced videos related to Zika.")

Researchers say conspiracy videos were even shown to people who'd searched for reputable information on the virus, the Times reports. "The videos often spread in WhatsApp chat groups that had been set up to share information and news about coping with Zika, turning users' efforts to take control of their families' health against them."

YouTube told the Times that their recommendation system now drives 70% of total time spent on YouTube -- and according to their article Thursday, Dr. Brito estimates that she now receives serious threats on her life about once a week.
Google

Google Criticized For Vulnerability That Can Trick Its AI Into Deactivating Accounts (minds.com) 49

In July Google was sued by Tulsi Gabbard, one of 23 Democrats running for president, after Google mistakenly suspended her advertising account.

"I believe I can provide assistance on where to focus your discovery efforts," posted former YouTube/Google senior software engineer Zach Vorhies (now a harsh critic of Google's alleged bias against conservatives). He says he witnessed the deactivation of another high-profile Google account triggered by a malicious third party. I had the opportunity to inspect the bug report as a full-time employee. What I found was that Google had a technical vulnerability that, when exploited, would take any gmail account down. Certain unknown 3rd party actors are aware of this secret vulnerability and exploit it.

This is how it worked: Take a target email address, change exactly one letter in that email address, and then create a new account with that changed email address. Malicious actors repeated this process over and over again until a network of spoof accounts for Jordan B. Peterson existed. Then these spoof accounts started generating spam emails. These email-spam blasts caught the attention of an AI system which fixed the problem by deactivating the spam accounts... and then ALSO the original account belonging to Jordan B. Peterson!

To my knowledge, this bug has never been fixed.

"Gabbard, however, claims the suspension was based on her criticism of Google and other major tech companies," reports the Verge. But they also quote the campaign as saying that Gmail "sends communications from Tulsi into people's Spam folders at a disproportionately high rate."

"Google may blame this on automated systems, but the reality is that there is no transparency whatsoever, which makes it difficult to determine the truth."
The Courts

Judge Orders Georgia To Switch To Paper Ballots For 2020 Elections (arstechnica.com) 120

An anonymous reader quotes a report from Ars Technica: Election security advocates scored a major victory on Thursday as a federal judge issued a 153-page ruling ordering Georgia officials to stop using its outdated electronic voting machines by the end of the year. The judge accepted the state's argument that it would be too disruptive to switch to paper ballots for municipal elections being held in November 2019. But she refused to extend that logic into 2020, concluding that the state had plenty of time to phase out its outdated touchscreen machines before then. The state of Georgia was already planning to phase out its ancient touchscreen electronic voting machines in favor of a new system based on ballot-marking machines. Georgia hopes to have the new machines in place in time for a presidential primary election in March 2020. In principle, that switch should address many of the critics' concerns.

The danger, security advocates said, was that the schedule could slip and Georgia could then fall back on its old, insecure electronic machines in the March primary and possibly in the November 2020 general election as well. The new ruling by Judge Amy Totenberg slams the door shut on that possibility. If Georgia isn't able to switch to its new high-tech system, it will be required to fall back on a low-tech system of paper ballots rather than continue using the insecure and buggy machines it has used for well over a decade. Alex Halderman, a University of Michigan computer scientist who served as the plaintiffs' star witness in the case, hailed the judge's ruling. "The court's ruling recognizes that Georgia's voting machines are so insecure, they're unconstitutional," Halderman said in an email to Ars. "That's a huge win for election security that will reverberate across other states that have equally vulnerable systems."

Government

Trump Administration Asks Congress To Reauthorize NSA's Deactivated Call Records Program (nytimes.com) 59

Breaking a long silence about a high-profile National Security Agency program that sifts records of Americans' telephone calls and text messages in search of terrorists, the Trump administration on Thursday acknowledged for the first time that the system has been indefinitely shut down -- but asked Congress to extend its legal basis anyway. From a report: In a letter to Congress delivered on Thursday and obtained by The New York Times, the administration urged lawmakers to make permanent the legal authority for the National Security Agency to gain access to logs of Americans' domestic communications, the USA Freedom Act. The law, enacted after the intelligence contractor Edward J. Snowden revealed the existence of the program in 2013, is set to expire in December, but the Trump administration wants it made permanent. The unclassified letter, signed on Wednesday by Dan Coats in one of his last acts as the director of National Intelligence, also conceded that the N.S.A. has indefinitely shut down that program after recurring technical difficulties repeatedly caused it to collect more records than it had legal authority to gather. That fact has previously been reported, but the administration had refused to officially confirm its status.
Businesses

The Video Game Industry Claims Its Products Avoid Politics, But That's a Lie. (theoutline.com) 108

Josh Tucker, writing for The Outline: Retired Lieutenant Colonel Oliver North was a Marine platoon commander in Vietnam, a U.S. Senate candidate, and eventually, a National Rifle Association president. At the National Security Council under Ronald Reagan, he helped manage a number of violent imperial operations, including the U.S. invasion of Grenada. Due to televised hearings in the Summer of 1987 where he gave horrifying testimony about the things that he and the United States government had allegedly done, he is probably best known for his role in the Iran-Contra scandal. Alternatively, you might instead recognize North as a minor character from Call of Duty: Black Ops II. In the game, he makes an appearance, service ribbons and all, to talk a retired Alex Mason -- the game's protagonist -- into joining a covert mission in Angola. The cameo was accompanied by North's role as an advisor and pitchman for the 2012 title. It was very bizarre, and, according to the developers, not at all political.

In an interview with Treyarch head Mark Lamia, Kotaku's Stephen Totilo asked if the studio had expected the controversy around using North as a consultant. "We're not trying to make a political statement with our game," Lamia responded. "We're trying to make a piece of art and entertainment." This answer would be farcical under any circumstances, but to be clear, Black Ops II was already a jingoistic first-person shooter in a series full of dubious storylines and straight-up propaganda. Its writer and director, Dave Anthony, would later go on to a fellowship at D.C.'s Atlantic Council, advising on "The Future of Unknown Conflict." Regardless, Lamia felt comfortable insisting on record that there was nothing political about getting the Iran-Contra fall guy to shill for its game. In the time since, this brazen corporate line has become the standard for blockbuster games, including the upcoming Call of Duty: Modern Warfare. "Are games political?" continues to be exhaustingly rehashed, because game companies continue to sell an apolitical delusion.

China

US Holds Off On Huawei Licenses As China Halts Crop-Buying (bloomberg.com) 131

After China said it was halting purchases of U.S. farming goods earlier this week, the White House retaliated by postponing a decision about licenses for U.S. companies to restart business with Huawei. "Commerce Secretary Wilbur Ross, whose department has vetted the applications to resume sales, said last week he's received 50 requests and that a decision on them was pending," reports Bloomberg. "American businesses require a special license to supply goods to Huawei after the U.S. added the Chinese telecommunications giant to a trade blacklist in May over national-security concerns." From the report: President Donald Trump said in late June after agreeing to a now-broken trade truce with Chinese President Xi Jinping in Japan that some restrictions on Huawei would be loosened. But that promise was contingent upon China beefing up its purchases from American farmers, which Trump has complained the country has failed to do. In the past week tensions have escalated further as Trump said he would impose a 10% tariff on $300 billion of Chinese imports as of Sept. 1 and his Treasury Department formally labeled China a currency manipulator. Still, Trump said last week there were no plans to reverse the decision he made in Japan to allow more sales by U.S. suppliers of non-sensitive products to Huawei. He said the issue of Huawei is not related to the trade talks.
Government

Critical US Election Systems Have Been Left Exposed Online (vice.com) 128

Jason Koebler shares a report from Motherboard: For years, U.S. election officials and voting machine vendors have insisted that critical election systems are never connected to the internet and therefore can't be hacked. But a group of election security experts have found what they believe to be nearly three dozen backend election systems in 10 states connected to the internet over the last year, including some in critical swing states. These include systems in nine Wisconsin counties, in four Michigan counties, and in seven Florida counties -- all states that are perennial battlegrounds in presidential elections. Some of the systems have been online for a year and possibly longer. Some of them disappeared from the internet after the researchers notified an information-sharing group for election officials last year. But at least 19 of the systems, including one in Florida's Miami-Dade County, were still connected to the internet this week, the researchers told Motherboard. "We ... discovered that at least some jurisdictions were not aware that their systems were online," said Kevin Skoglund, an independent security consultant who conducted the research with nine others, all of them long-time security professionals and academics with expertise in election security. "In some cases, [the vendor was] in charge [of installing the systems] and there was no oversight. Election officials were publicly saying that their systems were never connected to the internet because they didn't know differently."
Privacy

Democratic Senate Campaign Group Exposed 6.2 Million Americans' Emails (techcrunch.com) 105

A political campaign group working to elect Democratic senators left a spreadsheet containing the email addresses of 6.2 million Americans' on an exposed server. From a report: Data breach researchers at security firm UpGuard found the data in late July, and traced the storage bucket back to a former staffer at the Democratic Senatorial Campaign Committee, an organization that seeks grassroots donations and contributions to help elect Democratic candidates to the U.S. Senate. Following the discovery, UpGuard researchers reached out to the DSCC and the storage bucket was secured within a few hours. The researchers published shared their findings exclusively with TechCrunch and published their findings. The spreadsheet was titled "EmailExcludeClinton.csv" and was found in a similarly named unprotected Amazon S3 bucket without a password. The file was uploaded in 2010 -- a year after former Democratic senator and presidential candidate Hillary Clinton, whom the data is believed to be named after, became secretary of state. UpGuard said the data may be of people "who had opted out or should otherwise be excludedâ from the committee's marketing.
United States

US Formally Withdraws From Nuclear Treaty with Russia and Prepares To Test New Missile (cnn.com) 407

The United States formally withdrew from the Intermediate-Range Nuclear Forces Treaty with Russia Friday, as the US military prepares to test a new non-nuclear mobile-launched cruise missile developed specifically to challenge Moscow in Europe, according to a senior US defense official. From a report: The US withdrawal puts an end to a landmark arms control pact that has limited the development of ground-based missiles with a range of 500 to 5,500 kilometers and is sparking fears of a new arms race. "Russia is solely responsible for the treaty's demise," Secretary of State Mike Pompeo said in a statement Friday announcing the US' formal withdrawal from the Cold-War era nuclear treaty. Pompeo said, "Russia failed to return to full and verified compliance through the destruction of its noncompliant missile system." NATO Secretary General Jens Stoltenberg told CNN's Hala Gorani that the treaty's end is a "serious setback."
Privacy

A New Bill Aims To Protect US Voters From the Next Cambridge Analytica (technologyreview.com) 124

As the 2020 campaign season accelerates, a US lawmaker introduced a bill on Thursday that would regulate how political parties use voters' data in federal elections. rrconan writes: Democratic senator Dianne Feinstein said the bill, the Voter Privacy Act, is the first to directly respond to Cambridge Analytica, which used Facebook to harvest the data of 87 million voters, often without permission, in hopes of influencing their behavior. In fact, this was just one of many data operations ongoing in the world of US elections. Massive collections of data: In 2017, the Republican National Committee accidentally exposed political data on more than 198 million US citizens. The incident highlighted the technical challenges of protecting sensitive data troves online, as well as the enormous collections of information the Republican Party has gathered in an effort to win the next vote. While legislators around the world have zeroed in on how industry uses personal data, there is no American law governing the collection and use of voter data in politics.
United Kingdom

John McAfee Released From Jail in the Dominican Republic (nypost.com) 117

An anonymous reader quotes the New York Post: John McAfee of antivirus software fame has arrived in London from the Dominican Republic, where he had been detained for several days with his wife and several others for entering the Caribbean nation with a cache of weapons on his yacht, his lawyer said Friday. Authorities "asked him where he wanted to go, and he decided on London," his attorney Candido Simon told Reuters....

While in custody, McAfee retweeted a photo posted by his wife of himself sitting shirtless in a cell... [And another shirtless photo with his cellmate.] "My crime is not filing tax returns -- not a crime. The rest is propaganda by the U.S. government to silence me..." he wrote in a July 19 tweet.

In fact, McAfee now "is laying the blame on the CIA and 'an extremely corrupt Bahamian official,'" CNET reports.

McAfee "confessed in a tweetstorm earlier this year that he hasn't paid the IRS in eight years," reports the New York Daily News, adding that this week McAfee was "essentially deported" to London. "He previously fled to Guatemala from Belize when he was sought for questioning concerning the murder of a neighbor, Reuters previously reported." Earlier this month, Reuters also reported that McAfee had again fled to Cuba "after suspecting that U.S. law enforcement was trying to extradite him from the Bahamas."

CNET also quotes McAfee as saying that he now wants to run simultaneous campaigns to be both president of the United States and Prime Minister of England. "I believe I am one of the few people stil alive who could qualify for the combined position."
Security

Russian Hack of Elections System Was Far-Reaching, Senate Intel Committee Report Finds (npr.org) 365

An anonymous reader quotes a report from The New York Times: The Senate Intelligence Committee concluded Thursday that election systems in all 50 states were targeted by Russia in 2016 (Warning: source may be paywalled; alternative source), largely undetected by the states and federal officials at the time, but at the demand of American intelligence agencies the committee was forced to redact its findings so heavily that key lessons for the 2020 election are blacked out. Even key findings at the beginning of the report were heavily redacted. It concluded that while there is no evidence that any votes were changed in actual voting machines, "Russian cyberactors were in a position to delete or change voter data" in the Illinois voter database. The committee found no evidence that they did so. While the report is not directly critical of either American intelligence agencies or the states, it described what amounted to a cascading intelligence failure, in which the scope of the Russian effort was underestimated, warnings to the states were too muted, and state officials either underreacted or, in some cases, resisted federal efforts to offer help.
The Courts

Tulsi Gabbard, Democratic Presidential Candidate, Sues Google For $50 Million Over Suspension of Ad Account (usatoday.com) 236

Representative Tulsi Gabbard, the long-shot presidential candidate from Hawaii, is suing Google for infringing on her free speech (alternative source) when it briefly suspended her campaign's advertising account after the first Democratic debate in June. The lawsuit, filed on Thursday in a federal court in Los Angeles, is seeking damages of at least $50 million. It's believed to be the first time a presidential candidate has sued a major technology firm. The New York Times reports: Tulsi Now Inc., the campaign committee for Ms. Gabbard, said Google suspended the campaign's advertising account for six hours on June 27 and June 28, obstructing its ability to raise money and spread her message to potential voters. After the first Democratic debate, Ms. Gabbard was briefly the most searched-for candidate on Google. Her campaign wanted to capitalize on the attention she was receiving by buying ads that would have placed its website at the top of search results for her name. The lawsuit also said the Gabbard campaign believed its emails were being placed in spam folders on Gmail at "a disproportionately high rate" when compared with emails from other Democratic candidates. Ms. Gabbard and her campaign are seeking an injunction against Google from further meddling in the election and damages of at least $50 million.
The Courts

Justice John Paul Stevens, Dead At 99, Promoted the Internet Revolution (arstechnica.com) 90

Former Supreme Court Justice John Paul Stevens passed away Tuesday evening of complications following a stroke he suffered on July 15. He was 99 years old. An anonymous Slashdot reader shares a lightly edited version of Ars Technica's 2010 story that originally marked his retirement from the Supreme Court: In April 2010, the Supreme Court's most senior justice, John Paul Stevens, announced his retirement. In the weeks that followed, hundreds of articles were written about his career and his legacy. While most articles focus on 'hot button' issues such as flag burning, terrorism, and affirmative action, Stevens' tech policy record has largely been ignored. When Justice Stevens joined the court, many of the technologies we now take for granted -- the PC, packet-switched networks, home video recording -- were in their infancy. During his 35-year tenure on the bench, Stevens penned decisions that laid the foundation for the tremendous innovations that followed in each of these areas.

For example, Stevens penned the 1978 decision that shielded the software industry from the patent system in its formative years. In 1984, Hollywood's effort to ban the VCR failed by just one Supreme Court vote; Stevens wrote the majority opinion. And in 1997, he wrote the majority opinion striking down the worst provisions of the Communications Decency Act and ensuring that the Internet would have robust First Amendment protections. Indeed, Justice Stevens probably deserves more credit than any other justice for the innovations that occurred under his watch. And given how central those technologies have become to the American economy, Stevens' tech policy work may prove one of his most enduring legacies. In this feature, we review Justice Stevens' tech policy decisions and salute the justice who helped make possible DRM-free media devices, uncensored Internet connections, free software, and much more.
As the report mentions, Stevens was the Supreme Court's cryptographer. "Stevens attended the University of Chicago, graduating in 1941. On December 6 -- the day before the Japanese attacked Pearl Harbor -- Stevens enrolled in the Navy's correspondence course on cryptography."

"Stevens spent the war in a Navy bunker in Hawaii, doing traffic analysis in an effort to determine the location of Japanese ships," the report adds. "He was an English major, not a mathematician, but he proved to have a knack for cryptographic work."
The Military

Jet-Powered Flyboard Soars Over Paris For Bastille Day Parade (theguardian.com) 127

New submitter HansiMeier33 shares a report from The Guardian: France's annual Bastille Day parade showcased European military cooperation and innovation on Sunday, complete with a French inventor hovering above Paris on a jet-powered flyboard. The former jetskiing champion and military reservist Franky Zapata clutched a rifle as he soared above the Champs-Elysees on his futuristic machine, which the French military helped to develop. The board, which was first created to fly above water, can reach speeds of up to 190km/h and can run for 10 minutes. The French armed forces minister, Florence Parly, said before the parade that the flyboard could "allow tests for different kinds of uses, for example as a flying logistical platform or, indeed, as an assault platform."
United States

The 'Vast Majority' of America's Voting Machines Use Windows 7 or Older Systems (apnews.com) 152

Many of America's voting machines are depending on an outdated Microsoft operating system, reports the Associated Press. "The vast majority of 10,000 election jurisdictions nationwide use Windows 7 or an older operating system to create ballots, program voting machines, tally votes and report counts." That's significant because Windows 7 reaches its "end of life" on Jan. 14, meaning Microsoft stops providing technical support and producing "patches" to fix software vulnerabilities, which hackers can exploit. In a statement to the AP, Microsoft said Friday it would offer continued Windows 7 security updates for a fee through 2023.

Critics say the situation is an example of what happens when private companies ultimately determine the security level of election systems with a lack of federal requirements or oversight....

It's unclear whether the often hefty expense of security updates would be paid by vendors operating on razor-thin profit margins or cash-strapped jurisdictions. It's also uncertain if a version running on Windows 10, which has more security features, can be certified and rolled out in time for primaries.

The Associated Press contacted the Coalition for Good Governance, an election integrity advocacy organization, and received this comment from the group's the executive director.

"Is this a bad joke?"
Businesses

Ross Perot, Founder and Former CEO of Electronic Data Systems and Perot Systems, Dies At 89 (cnbc.com) 149

Ross Perot, a self-made billionaire, independent presidential candidate, and philanthropist, has died at the age of 89 after a five-month battle with leukemia. Perot rose to fame after founding his first company, Electronic Data Systems, in 1962 with just $1,000 in savings. More than two decades later, he launched information technology services provider Perot Systems, which was acquired in 2009 by Dell for $3.9 billion. CNBC reports on his political accomplishments: As a disruptive third-party candidate for president, Perot ran on a platform of fiscal responsibility and protectionism. He won nearly 19% of the vote in the 1992 race -- by far the biggest slice of the electorate for a third-party candidate since Theodore Roosevelt's Bull Moose Party in the 1912 election. Perot stood out from the political crowd for his quirks as much as his business credentials and lack of experience in establishment politics. "I don't have any experience in running up a $4 trillion debt. I don't have any experience in gridlock government, where nobody takes responsibility for anything and everybody blames everybody else," he said in a 1992 presidential debate. The shifting of U.S. jobs to Mexico created a "giant sucking sound," he famously said during the campaign. Perot was also a bit of a pack rat, collecting everything from whimsical toys to priceless artifacts. Perot owned the only Magna Carta ever allowed to leave Great Britain, which he loaned to the National Archives in Washington, D.C., and in 2007, sold it for $20 million.

Slashdot Top Deals